NetWorker: Backup SAP HANA Database with sslenforce is enabled

Summary: This article provides a workaround to backup SAP HANA database where sslenforce is set to 'true'.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

NetWorker Module for SAP (NMSAP) is not able to backup SAP HANA database when sslenforce=true is set in global.ini.
The following error is observed in the backup logs:

4321:only secure connections are allowed SQLSTATE:HYOOO

Cause

Backup fails because the sslenforce=true in the global.ini file.

Resolution

There are two steps involved in resolving this backup issue.

  1. Prepare the environment on HANA client
    1. Copy hdbsql to hdbsql.bin:
cp /usr/sap/SID/HDB00/exe/hdbsql /usr/sap/SID/HDB00/exe/hdbsql.bin
  1. Create appropriate init_hana_nmsap.utl files with customized save set name.
cp /etc/init_hana_nmsap.utl /etc/init_hana_SYSTEMDB.utl; update NSR_SAVESET_NAME=SAPHANA:SYSTEMDB
cp /etc/init_hana_nmsap.utl /etc/init_hana_SID.utl; update NSR_SAVESET_NAME=SAPHANA:SID
  1. Create a script file /usr/sbin/nsrhdbsql with hdbsql command options as below.
#!/bin/sh

# Backup SYSTEMDB
/bin/su - sidadm -c "/usr/sap/SID/HDB00/exe/hdbsql.bin -U BACKUPADM -e -sslprovider commoncrypto -sslkeystore /usr/sap/SID/HDB00/hana1/sec/sapsrv.pse \"BACKUP DATA FOR SYSTEMDB USING BACKINT ('/usr/sap/SID/SYS/global/hdb/backint/SYSTEMDB/SYSTEMDB_FULL_$(date +'%m%d%M')')  TOOLOPTION 'NSR_UTL_FILE=/etc/init_hana_SYSTEMDB.utl'\""

#Backup Tenant SID
/bin/su - sidadm -c "/usr/sap/SID/HDB00/exe/hdbsql.bin -U BACKUPADM -e -sslprovider commoncrypto -sslkeystore /usr/sap/SID/HDB00/hana1/sec/sapsrv.pse \"BACKUP DATA FOR SID USING BACKINT ('/usr/sap/SID/SYS/global/hdb/backint/DB_SID/SID_FULL_$(date +'%m%d%M')') TOOLOPTION 'NSR_UTL_FILE=/etc/init_hana_SID.utl'\""

# Collect exit code of hdbsql and pass it as exit code of this backup script
EXIT_CODE=$?
exit $EXIT_CODE
  1. Set permissions and ownership on the script:
chmod 555 /usr/sbin/nsrhdbsql
chown root:root /usr/sbin/nsrhdbsql
  1. Create HANA client resource in NMC for file system backup using non-wizard method.
    1. Create the file system resource for the HANA client
    2. For 'Save set' select any valid file on the file system. For example, /etc/hosts
    3. Use nsrhdbsql for the Precmd attribute of the client resource
    4. Ok
    5. Add the client to group and policy

Affected Products

NetWorker, NetWorker Module for SAP

Products

NetWorker Family, NetWorker Module
Article Properties
Article Number: 000165343
Article Type: Solution
Last Modified: 31 Mar 2026
Version:  5
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.